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Executive Summary 


by thc 1 t0 rcv ‘ cw Linux DVD development forums to 

the nvn >f *"* " 6 was playcd by ^“P mcrabcTS » the breaking and release of 

the DVD CSS encryption system. Based on our detailed analysis, Cinea believes that 

some members of the Linux development community materially participated in the 

an. ysis and implementation of the CSS algorithms for the purpose of enabling DVD 

playback within the Linux environment. But there is no evidence that individuals in the 

Linux group provided critical breakthroughs. Our analysis indicates that the primary 

technical breakthroughs m Drive Authentication and Bulk content decryptio^er^ 

eve oped outside of the Linux development groups and were made available to the 

. / . ■ ...... * enck Fawcus, hsd contact with the 

various groups/individuals that provided the key technical breakthroughs and acted as a 
liaison between the external hacker community and the Linux development groups 
Details of those contacts are not available in the material provided with the exception 0 f 

1 ^° h T SS °? frOTn thC gr ° Up MoRc> which rcl “ sed DeCSS » early October <2d Johan 
Addis who released the drive authentication, code in mid-July. 
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Analysis Overview 

several of the r* 8 * ofthc MPAA to review 

analysis was to determine P ^ se otZ 

the breaking and release of the DVD CSS encryp^wfJ’to ° f & 0u P s in 
C5C materials for the individual’s motives^S n cX^f CS^ UOna ' ,y rev,ewed 

T‘ 6h0 “' he 

Che MPAA, and any visit, , 0 Web sites referencin' to “ Ci "“ * 

eroups. around e£^on^ntra™'^ S eff^p y s Sr‘“ d "“ °” 411 ’ loos ' | y coupled 
shared soutoe code and a result, ftS " omM » Mef in open and 

cnllecrioa of individuals The C DVD 

Linut ’na'en^^a^r ^ “"*« f - 

the Linus environment. T“ C of roab,in e D ™ playback within 

breakthroughs in Dnve A^en“S=„ Ld“S 1™^' 
outside of the Linux dcvelonmmf o . * COnlent d^oxyphon were developed 
development sro»“s P ^ “* “ a ' m *“ «»W>le to the Linus 

Our analysis indicates that one Derrkr Fau/mc v, * 

groups/individuals that provi£d the t Z i ■ ** 1)16 variou ^ 

between the external h£ker Lmmu^xV^lt a actcd 85 a 

those contacts arc not available in rh ^ • *- inux development groups Details of 

Johansson from the £o„p Mop! !S deas'e? »"» 

Adchs Who released the drive automation code in md My'"* Joh “ 

community initially^ u5«Kf or °n DOt maTlheT * of Linax 

the CSS system. While there was rm.rh a ^ 1QJD ^^ y Pushed, significant details of 

members of the group were civen inf n h d, f SCUSS10n of how tbe system worked and some 

CSS algonthms^^/'^'"^ 11 ' °° JP™** containing description of the 
to other mentioned releases of the samTinf" * ‘ mattt ? aIs P rovidcd w bich are dared prior 

forum, including Derek Fawcuf volunte^dT, ‘ T' T ^ multl P Ie membtrs of the 
inaication whether this did d-d no ^ 6 s P e:!flca!l °^ but there is no 
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* v is 


development forums WCTC 

understood the potential of using open soufclw^ ^ ' ^ paftici P^ 

illegal copying capabilities, they would routinely E0 out of the ^ ^ deVclo P menl of 
discuss the illegal nature of such fle * t* • " y E ° ° ut of the ‘ r wa y to publish and 
fevdop , £gll if ^ cama ^ w “ cl ~>r “ 

' P " y d, «rit> U .cd ,0 enable DVD playbuk £ Li.™ “““ b « 

Analysis Methodology 

* M** Litveck of tbe 

s fr „ m ^ 


build 3 ,' Th T' P “' ° f ^ “*•>** » 

how the CSS system was broke* aid wha^Tf 2, f ,k T?" 10 Ulldcm£nd wh£n 
communities panicipated in these efforts. ’ *’ °* ^ LmUX 

■hoso effom added oo rL5.*„“ “ ^ tf ” In jn^rel 

referenced material removed “ k ‘ d beOT cl °“ d °r the 

Soben s£ S rS“ SS ““ TTI- "" “ “=>’ 1 °y"r involved 

architecture, end ha^“he*e ™£? “>• d=tael«3 knowledge of the CSS 
materials. pnvy 10 '‘viewing any official CSS related 




Timeline Review 


made'Sete^ SS -T *“? ^ key “evelopmenv were 

CSS Authorization in mid Jufy i,T ‘ 9W ’ hr ° Ugh *' brald “S of 

in mid September 1999; and (c) wide nublie»ti™ < f¥ *“** C ? n f ent dec Option capabilities 
1999. ’ Q lc J u idc publication of keys and algorithms in October 

oft“„ £ „' e'd^ti'cls e^K ? "*» - lb- « f°ut torinc, p.eeea 

P>«es of information arc available a fSir^ ata ,° n 3 PC ' Unril Md unltss aI! feur 

Dlt a ful1 CSS implementation is no: possible. 
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1 • First the CSS disc authentication must take place. This authenticaaon must occur 
once per disc inserted in the drive. Once the authentication is completed the drive is 
permitted to release encrypted sectors on the disc in the drive. 

2. The overall data structures for key management and flow of keys and other 

information between the drive, data on the disc and the playback subsystem must be 
understood. 

3. The actual CSS content encryption cipher (encryption algorithm) must be understood. 

4. At least one Player key must be known in order to decrypt the content. 

Now we can begin to discuss the timeline, where events will roughly follow the four 

pieces of information required. 

a) Start - breaking of CSS Authorization 

When the reviewed documents began in mid June the participants had already 
identiSed two phases to the overall CSS algorithm. The first phase was disc 
authentication, followed by the actual content decryption. Based on publicly 
distributed documents which describe the ATAPJ disc drive interface, the general 
outline and commands needed to setup a DVD disc drive authenticaiion are well 
known. The developers used this information to implement a DVD driver for the 
Linux environment. They were in the process of trying to understand the algorithms 
used to calculate the necessary keys and challenges necessary to complete the 
authentication. 

Key players during this period were Paul Volcke who was coordinating the overall 
effort. Derek Fawcus who was actively trying to understand the algorithm using trial 
and error methods, and finally Andreas Bogk who said hr was trying to acquire a CSS 
license while also observing the environment within the Windows domain. 

This period ended on the 1 3‘* of July when a Johan Addis posted to the discussion 
group that he had Reverse Engineered the CSS disc authenticaaon on a Windows 
machine and had code running since the beginning of 1 999 which was able to setup 
sessions with a disc drive. Johan offered to release this code to the Linux community, 
and also said that he was working on Reverse Engineering the content decryption 

portion, so far without success. Johan never discussed why he embarked on these 
efforts or what his motivation was. 

Johan s posting resulted in a flurry of activity cm the board with significant 
discussions about the legality of posting his code and its use within a Linux playback 
environment. Johan was requested to not post the code on the LinuxDVD forum by 
its moderator due to potential legal issues. On the 14 th of July, Johan released the 
code external to the reviewed Linux materials, it is not clear from the existing 
documentation where it was posted. 


* allowing the release of the code by Johan, Derek Fawcus and others convened the 
code from assembler to C code, debugged and enhanced it. This enhanced code was 
eventually widely distributed within the available development source trees. It is not 
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iiK a “ ,h0n ' a ““ w “ ev " ““-ponttd Within a w VTO0 „ 
b) First Decryption Capabilities 

Following the posting of the disc authentication code the focus of the , 

tta recovery of the due keys and title keys rraceatary to “ 

the disc. Occe the disc is autheir.ic.ied the drive is fire to r2Le 
sectors ,0 a toad eonenod. Howevet. fircse 

decrypted using disc and title specific keys. be 

fl?™ mid tl £°‘i 6b ** md of Sc I*«nber the group discusses various potential 
tructures of the CSS content encryption. From these discussions they betrin tam, 

^der^dmg of the structure in terms of how to identify encrypted LJL £ 

ciph C,phCf (cnc ^ tion ^gorithm) is a block mode 

c pner with 40 bit keys. This data appears to have been determined throueh various 

analysis of the available data coming from the drive (after authorizing the transfers! 

APT 31311 y! rr f pu ^*’ cl y available documents including Microsoft Windows 
T and patent filings from Intel, Compaq. Cimis and Oak. There are no 
indications that any of the direct participants on the list had any access to CSS 

to facl Iter a ° d n,i ““'““ s — « ■*> « » wtai ,he 

Derek Fawcus however. continues to be a focal point for the feeding of information 

0Uls,de t0 DVD development group. In late July (7/3 1) Derek reports 

nurr ^ ^ * ‘■' Tn8J ° r Wl,r ° n decodin S 8 VOB file, but never' idenrifi«a e 
f - ^ c . vcn lf 11 15 m refcrcncc t0 enoyption or other characteristics of the VOB 

css Lk bu tSZLV l) D f erCk mdiCaI 4 S ^ he h “ bCCfl made of a pZial 

k bur has no firm information. There is no indication of whether this hack 
references the early rippers or a more substantial break of the CSS system In laic 

g < nms css i 

det > of P rh ^ '? SCem 10 work ' Al ^ dme Dcrck does “i reveal any 

|^ ofthc « hacks only their existence. By mid October Derek reports that he 
now knows of five different individuals and/or groups which have 

?nSn^ alg t? ri ? mS t f0r CSS and 1)131 31 least several of them were 

independently developed (Posting of Oct 11 ,h on LividDEV). On October 27* Derek 

sS This k n yf- P f >StCd ,<bcsinniD S s '‘ of 8 css algorithm description on his web 
Irus js his last substantive posting relative to this ana lysis. 

Ke> discussion participants during this time are Derek Fawcus, Michael Holtz. 

ChriS* w^ DaVid MH ’ Md Paul Volcko - Mimr buI interesting participaSs are 
2TS a ri^ 5 Mueller. Several of these folks including PaS^olcko 

? aVC accKS t0 the DVD ^“tions Sot the CSS 

specs). In general these individuals are very careful not to violate tbeir DVD 

co^t.ahry, David MH nee: reveals his full identity and makes the firJ 

_es o rippers (pewernp and DvdRip) on the 18 * of August. He later 
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returns, September 22 &. 23 rd . posting that he knows the group that wrote SpccdrippeT 
(Drink or Die *DoD’) and that playback using these would not be legal. 

In the middle of August the first ‘Rippers’ appear. These rippers, PowcrRIP and 
DVDrip, are reviewed by various members of the group and the conclusion is that the 
rippers do not have access to the keys. The consensus was that they take advantage 
of loopholes in the Windows software implementations which allows the theft of 
decoded and/or decrypted content from the PC's memory. 

During late September and early October there is much discussion of a full hack of 
CSS using Speedrippcr, first referenced by David MH on Sept 22 nd . Spccdrippcr was 
developed by & group called Drink-or-Dic (Dod). The Speedrippcr is a partial 
solution, but appears to be missing some keys or key functionality, as it does not 
handle Warner Brothers Titles. Finally in early October the DeCSS program is 
discussed by Derek and finally released by Jon Johansson on the 6 th of October. In 
later postings Jon confirms that he sent the source code for DeCSS to Derek as a 
release to the Linux community. 

The hacker world is now able to fairly reliably remove CSS from DVD discs. The 
Linux community, however, still does not have a useful tool as both DeCSS and 
SpeedRip run only under Windows and no source is published. 

c) Wide publication of Algorithm and Keys 

Following the publishing of DeCSS there is widespread discussion on the forums 
about the legality of these systems. How they would be integrand, if a: all, into a 
Linux environment, and continuing notices from many of the discussion members 
about the need to legally license the DVD stuff, the MPEG stuff and potentially the 
CSS stuffbefore any of this working code is useful to the Linux community. Relative 
to the legality of bypassing CSS without a license, there is extensive debate about 
whether use for playback within Linux, which is clearly the groups focus (including 
Derek Fawcus). constitutes a breach of various European and US Copyright laws 
(including Title 17 [ED ?? Correct name?]) 

During early October there is an article published in the German computer magazine 
C'l which discusses the CSS algorithm in a fair amount of detail. As a result of this 
article and the groups research and discussions, there is a fairly detailed knowledge of 
the exact nature of the key movement and handling. There is little knowledge (other 
than with Derek) of the actual Cipher (encryption algorithm), nor are any player keys 
known. Without keys or details of the Cipher the key passing algorithms are 
essentially useless, thus the focus of the group shifts to this last critical stage. The 
group realized thai while they do not know' the Cipher details the authors ofDeCSS 
and SpccdRippcr do and assume that the details of the Cipher will soon become 
known. Thus their primary' focus is on how to get ax more than one or two player 
kevs. 

r’ 
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Durrng this period several anonymous posters release information, including a post on 

? 8 n f S^ er thaI gCtTmg at pJaycr kcys wiU not be a problem and that in 15 
hours all 400 player keys can be extracted on a 400raha Pentium PC. There is no 

.nd.cat.on of who posted this. On the 1 1* of October Derek Fawcus offers to brim- 

together any interested parties in terms of arranging for the public release or * 

publishing, of the CSS algorithms and/or keys. 

On the 26* of October, the source code to DeCSS appears to have been released it is 
not evident where or by whom. Following this Aaron Holtaman writes his 

description of the algorithm since as he sees it “CSS code is now public" and thus he 
feels can discuss details openly. 


This period culminates with the publishing by Frank Stevenson of his initial attacks 
against the CSS Ciphers. Frank is a new member to the list and describes his interest 

v. Fiank 1 laICr relCaSCS 2 scholarl y P^er which describes in complete 
deta.1 the CSS cipher, a detailed analysis of its particular weaknesses, and bow the 

weaknesses can be exploited to easily break the Cipher and gain access to the secrets, 
rank appears To have done his analysis based on the source code to DeCSS. 


Involvement of Key Individuals 


Lunix Development Community 

The following individuals were regular members of the Linux development 
community who's overriding efforts and interest were in the development of DVD 
playback capability within the Linux environment. 


Andreas Bogk 

Andreas Bogk is one of a handful of Germans on the site who contributors to the 
gonthm discussion. Andress is interesting because he is pretry heavily involved in mid 

.i* -.l® es ?? m '. all y ® ocs silent UTUi ' carl >' October when he rejoins the discussion of the 

algorithms. H.s insights are often keen. It is not dear what be was doing between Mid 
July and Early October. 

Derek Fawcus 

, Derek Fawcus was a key member of the Linux DVD development environment 
L .~* emphasis on the enabling of playback of CSS protected movies under 

nux. D«k participated actively in discussions about how CSS worked and how DVD 

Dt l\ S an , d C f S couli/sh °uld be incorporated within the Linux framework. In addition 
„ *5; , d l xle " s,ve code development and debugging of CSS related portions. In 

l intoVi^C ^o°d thC dnve K au T thraQC:stiori developed by Johan Addis and turned 
u into usable C code within the Linux environment. 
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Durrng this period several anonymous posters release information, including a post on 

? 8 n f S^ er thaI gCtTmg at pJaycr kcys wiU not be a problem and that in 15 
hours all 400 player keys can be extracted on a 400raha Pentium PC. There is no 

.nd.cat.on of who posted this. On the 1 1* of October Derek Fawcus offers to brim- 

together any interested parties in terms of arranging for the public release or * 

publishing, of the CSS algorithms and/or keys. 

On the 26* of October, the source code to DeCSS appears to have been released it is 
not evident where or by whom. Following this Aaron Holtaman writes his 

description of the algorithm since as he sees it “CSS code is now public" and thus he 
feels can discuss details openly. 


This period culminates with the publishing by Frank Stevenson of his initial attacks 
against the CSS Ciphers. Frank is a new member to the list and describes his interest 

v. Fiank 1 laICr relCaSCS 2 scholarl y P^er which describes in complete 
deta.1 the CSS cipher, a detailed analysis of its particular weaknesses, and bow the 

weaknesses can be exploited to easily break the Cipher and gain access to the secrets, 
rank appears To have done his analysis based on the source code to DeCSS. 


Involvement of Key Individuals 


Lunix Development Community 

The following individuals were regular members of the Linux development 
community who's overriding efforts and interest were in the development of DVD 
playback capability within the Linux environment. 


Andreas Bogk 

Andreas Bogk is one of a handful of Germans on the site who contributors to the 
gonthm discussion. Andress is interesting because he is pretry heavily involved in mid 

.i* -.l® es ?? m '. all y ® ocs silent UTUi ' carl >' October when he rejoins the discussion of the 

algorithms. H.s insights are often keen. It is not dear what be was doing between Mid 
July and Early October. 

Derek Fawcus 

, Derek Fawcus was a key member of the Linux DVD development environment 
L .~* emphasis on the enabling of playback of CSS protected movies under 

nux. D«k participated actively in discussions about how CSS worked and how DVD 

Dt l\ S an , d C f S couli/sh °uld be incorporated within the Linux framework. In addition 
„ *5; , d l xle " s,ve code development and debugging of CSS related portions. In 

l intoVi^C ^o°d thC dnve K au T thraQC:stiori developed by Johan Addis and turned 
u into usable C code within the Linux environment. 
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Derek became a focal point of communications between the Linux development 
community and the apparently separate hacker community. It is clear that the hacker 
community was observing the efforts on the Linux board. In October they began to 

“ OT> ™ US p °™ gs ' prior ,o 0ctob “ ^ ^ » ■»« 


In none of the postings is there any indication that Derek had any direct access to rcc 

mi to lie, to s =vcnU tofl»= e! Dtrek mate ^ „to“h m cto J, y 

bre^hroughs m terms of breaking the disc authenricahon or content dccJyptimf SSSL 

t USC ^ and cnhanccd other’s work, while also discussing l^reviewing the 
a gonthms, as he understood them at any given point. ^ 

Finally, in the information provided, there is no clear evidence that Derek ever direetlv 

° f ^ ulfonnalion and sourc « code made available to him by the hacker 

wh^vT 1 ^' ♦ Tt l° n i y ? xccpDcm 10 1 *** 15 a P os ung by Derek on the 27* of October 

weSite u P0 ^ 11,6 “ be S inIlin S ,, of an ^thm description to his 

Ckmhi m f r f* th u! D u CrCk did 0ffer on scvcra] occasions, including the 1 1* of 
October, to facilitate the publishing of the algorithm. 

Aaron Holtzrnan 

* r , ^° n ^ oI ^man is primarily involved, until October, in the development of an 
C-3 playback subsystem. In October he suddenly enters the CSS discussions with 
several posts on October 27 which indicaie that he has studied the CSS algorithms in 

!" thC ° Ct0bCr 27 * hc p0StS ^ CTD > whcrc hc stales his 

a the CSS code. algorithm and data arc now public and thus he can freely 
^scussthem. On October 28‘ an individual named ‘aaron nonymous’ posts some source 
*W function (not described) other than the heading of the post which is 

2? ° ' ‘ ,de f ° r . reading/descrambling DVD". The name similarity between Aaron 
noltzmann and Aaron nonymous - is striking given the context. 

Michael Holtz 

the m J^ ChaC l H0UZ iS f interestin 8 member of the community. Michael as not one of 

S ,S °T y conccmcd *** the legality of what is being accomplished 

! "y industrious in his finding out information about CSS For cxamnlc 

" JST 0f P °^, on S ***"*r 5*- he discussed the information he bJ'gk^SS 

ind^ted S £rililyi ngS CS r ^ lntcI ’ Compa< *- Cimis “ d Oak. He also 
OOSI < ,5* d i ^ W,th VldeoCr >T>t and >« inner workings. On September 30* he 

^ II kr '°^ S ° m “ ne wh0 Rcversc Engineered a windows dnver but wants to 
anonymous. Michael follows this with a post on October 1“ wondering how 

OcmC T f °^ S Ca f! 1 W ° rk t0gelhcr - Based on Michael’s lack of information in early 
S2S S Un " kCly ^ M,Chad was 0ne ° fthe but he seems to bHf that 
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Nathan Laredo 

Nathan Laredo is a new comer to the discussion group with his first posting on 
October 1 . He writes very assertively in his first posting about the nature of CSS 
encryption, describing the algorithm to be like RC4, and also says that the ability to read 
the encrypted files in WIN98 is a breach of the CSS licensing agreement. He never 
identifies how he knows that this is a breach. His last posting is on October 8* when he 

says that he heard a rumor that 40 player keys may soon be available. He never identifies 
the source of this rumor. 

Paul VoLcko 

Paul Volcko was the overall organizer of the DVD on Linux development effort 

r aU ', ^^° rklng with a erou P of WT (Rochester Institute of Technology) students on a 
legal DVD development effort in Linux called LSDVD (They had licensed the DVD 

specifications, bot NOT the CSS specifications). Paul would engage on speculation 
about how CSS worked but was continuously concerned that solutions needed to be 
developed that could be legally distributed. It should be noted that Paul and other 
members of the community became increasingly frustrated that they could not get any 
cooperation from the CSS licensing authority for their efforts. 

There is no indication that Paul was involved directly in any of the CSS efforts other than 
open speculation and discussion of how the CSS algorithm worked. 


External Contributors 

The following posters were outsiders to the Linux development community who 
in general came into the discussion for brief periods of time, often providing critical 
source and information. These individuals generally provided no support to the Linux 
development efforts other than the release of information to the Linux community. They 

are likely members of the more general hacking community and in many cases posted 
anonymously. 

Johan Addis 

Johan is the clear source of the code which allowed the authentication of Discs 

and DVD drives. Johan was only active for a brief period in Mid July when he discussed 

that he had this code and eventually posted it, but not in this forum. It is not clear from 

the available material where the code was posted. The code created by Johan is then used 

by Derek and other in the community as the basis for the ‘C* source included in the 

development source tree. During his posting, Johan mentions that he had the ability to 

authenticate to drives since early in 1999 and that he was also working on the content 

dairyption bui was not yet successful. There is no discussion of his motivation for these 
efforts. 


Jon Johanson 

Jon Johanson is the source of the posting and release of the DeCSS program. Jon 
in his '•anous postings, starting in late September ( 23 ^) and running through early 
November, is ambiguous about how the code was created. 1c mosfposts when calk^g 
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about DeCSS he says I. while in others he goes to lengths to describe “we or they” when 
talking about the creators of DeCSS. In his first post, done anonymously on the 23* of 
Septemberas "Digitech". he says that “Drink or Die" would never release source code 
but that a friend ot his has similar code and he (Digitech) already has a copy. In any 
case, It is clear that Jon acted at least as a go between for the group MoRc and DeTek 
Fawcus with both sides sending each other relevant source code. 


David MH 

David MH is the only unidentified semi-regular contributor to the posuock He 
posts only 3 relevant messages, but all three discuss rippers. The third posting cm the 23 rt 
of September identifies the source of “Speedripper” and David indicates the he 

understands it would not be legal. 

Ghost XYZ 

r rv. P bosT ' s 8:1 ^ony^ous poster who placed a reference-to an article on the 9* 
of October. There is no indication what this article contained, other than information on 
LSS. The URL referenced still contains four links, but these links arc no longer valid. 

Frank Stevenson 

rw ^ tev< f?° n 1S 3 ^ cntr >’ int0 the discussions, posting his first entry on 

October 27 . Frank has a strong cryptographic background and ends up posting detailed 
scholarly discussions and papers on how CSS works and how to break the Ciphers 
In his paper , Frank states that all of his knowledge of CSS was gleaned from reviewing 
the posted source code for software claiming to be a descrambler. He further states thai 
he has no access to any CSS information under NDA, nor has he read any official CSS 

documentation. There is no indication of why Frank focused on CSS other than an 
interest in things cryptographic. 


Slamg va 

Slamg ya, an assumed pseudonym, posts a single entry on September S'* saying 
that he has been watching this fbrum the entire time and that people should look at 
several sues in gennany which have papers on CSS. These papers axe no longer availabi: 
as the sue dvdsoft.de has been shut down. The URL’s were: 
blt R^vdsoft . dc./filgg./l ?94cp91 pdf and hmW/dvdsoft.rici'fllec/cssnancr rvif 


Open Questions/Issues 


2 ) Why was a posting on Jor. Johansonn on the 8* of October signed bv “Jamie" and 
who is "Jamie? 

b) Where did Johar. Addis post his Disc authentication code? 

c) Wnere was the DeCSS source code posted, and who posted it 0 
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Person Dale | Source ICommants ! ' • f__ 

slamg ya 8-Sep LivIdOav Says he has been walching the whole time and says to look at several siles in 

Germany. Http://dvdsoft.de/filez/1394cp91.pdf and 

htto://dvdsott.de/filez/cssDaDor.pdf 
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